setup-matt-pocock-skills
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill explores the repository by reading multiple files including
CLAUDE.md,AGENTS.md,CONTEXT.md,CONTEXT-MAP.md, and project manifest files likepackage.json. These files serve as untrusted input sources that influence how the skill scaffolds the issue tracker and domain documentation. - Ingestion points:
git remote -v,.git/config,CLAUDE.md,AGENTS.md,CONTEXT.md,CONTEXT-MAP.md,docs/adr/,package.json, andpnpm-workspace.yaml. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the exploration step.
- Capability inventory: The skill has capabilities to read files, execute directory/file existence checks, run
gitcommands, create new markdown files indocs/agents/, and update existingCLAUDE.mdorAGENTS.mdfiles. - Sanitization: No explicit sanitization of the content read from the repository files is documented before it is used to summarize findings or generate drafts.
- [COMMAND_EXECUTION]: The skill instructions and generated templates utilize standard command-line interfaces for repository management and issue tracking.
- Evidence: The skill uses
git remote -vfor environment discovery and provides templates forgh(GitHub CLI) andglab(GitLab CLI) to perform operations such as creating issues, viewing comments, and managing labels.
Audit Metadata